Back Kucoin

The recently disclosed FomoPeek security incident and DarkSw

Kucoin • September 20, 2026

The recently disclosed FomoPeek security incident and DarkSword exploit toolkit are important reminders to keep iOS devices secure:

◾️ FomoPeek: According to SlowMist, versions 1.1–1.2 were found to contain malicious code that could exploit iOS vulnerabilities, escape the system sandbox, and access data from other apps.

◾️ DarkSword: A recently disclosed iOS exploit toolkit that could use malicious links or compromised websites to exploit unpatched vulnerabilities, gain access to a device, and extract sensitive data.

Although their attack vectors differ, both pose risks at the device and operating system level. Even if a wallet itself has no vulnerabilities, sensitive data may still be at risk on an infected or outdated device.

🛡️ To help protect your assets, we strongly recommend:

🔹 Update iOS to the latest version for your device

🔹 Remove FomoPeek and any other suspicious apps

🔹 Avoid unfamiliar links and untrusted websites

🔹 Download apps only from official sources

If you installed or used FomoPeek 1.1–1.2, create a new wallet on a clean, fully updated device and transfer your assets ASAP. For additional protection against device-level risks, consider using a @KeyPalWallet hardware wallet for larger holdings.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FomoPeek Malware Exposes Crypto Wallets on iOS Devices Binance and SlowMist have issued warnings regarding the FomoPeek app, versions 1.1 and 1.2, which contain malicious code capable of stealing private keys, seed phrases, and login credentials from iPhone and iPad users. The malware exploits iOS vulnerabilities, allowing it to escape the application sandbox and access sensitive data from other apps. Users who installed FomoPeek are advised to delete the app, update their iOS, and create new wallet credentials on a clean device. The malware's exploitation framework includes eight attack methods targeting iOS versions from 12.0 to 26.1. The incident has raised significant concerns among self-custody crypto users, as attackers can control stolen assets without needing continued access to the victim's device. Binance has recommended immediate action for affected users to safeguard their assets. The situation follows multiple reports of stolen assets linked to the malicious app. 11 sources 69

Extracted Entities

The recently disclosed FomoPeek security incident and DarkSw

The full story

Extracted Entities

Attack Types (1)

Malware (2)

MITRE ATT&CK (1)

Platforms (1)